networks:
  proxy:
    external: false
    name: proxy

volumes:
  letsencrypt:
    name: letsencrypt

services:
  traefik:
    image: traefik:v2.9
    restart: unless-stopped
    command:
      - --global.sendAnonymousUsage=false
      - --api.insecure=true
      - --providers.docker=true
      - --providers.docker.network=proxy
      - --providers.docker.exposedByDefault=false
      - --providers.docker.swarmMode=false
      - --entryPoints.web.address=:80
      - --entryPoints.websecure.address=:443
      - --certificatesresolvers.myresolver.acme.tlschallenge=true
      - --certificatesresolvers.myresolver.acme.email=maier@arbeitsschutz-ulm.de
      - --certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json
      - --log=true
      - --accessLog=true
    ports:
      - "80:80"
      - "443:443"
      - "2222:2222"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - letsencrypt:/letsencrypt
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.traefik.entrypoints=web"
      - "traefik.http.routers.traefik.rule=Host(`arbeitsschutz-ulm.ddnss.de`)"
      - "traefik.http.routers.traefik.middlewares=traefik"
      - "traefik.http.middlewares.traefik.redirectscheme.scheme=https"
      - "traefik.http.routers.traefik-secure.entrypoints=websecure"
      - "traefik.http.routers.traefik-secure.rule=Host(`arbeitsschutz-ulm.ddnss.de`)"
      - "traefik.http.routers.traefik-secure.tls.certresolver=myresolver"
      - "traefik.http.services.traefik-secure.loadbalancer.server.port=8080"
    networks:
      - proxy